Privacy Policy

Last updated: 25 August 2026

1. General information

Our website can generally be used without providing personal data.

Where personal data—such as a name, postal address, email address or telephone number—is collected on our website, this is generally done on a voluntary basis. We process this data in accordance with the applicable German and European data-protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications and Telemedia Data Protection Act (TDDDG), as applicable.

We use organisational and technical measures to protect personal data processed through this website as comprehensively as possible. However, internet-based data transmissions, such as communication by email, may contain security vulnerabilities. Absolute protection cannot therefore be guaranteed.

For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone or post.

2. Controller responsible for data processing

The controller responsible for processing personal data on this website is:

SPEER RACING GMBH Sportveranstaltungen
Vogelsangstr. 41/3
72581 Dettingen an der Erms
Germany

Email: racing@speer-racing.de
Telephone: +49 (0)7121/768080

3. General access data and server log files

Each time a user accesses our website, our systems may automatically collect general data and information, which may be stored in the server log files. This may include, in particular:

the browser type and version used;
the operating system used by the accessing device;
the website from which the accessing device reaches our website, known as the referrer URL;
the subpages accessed through the accessing device;
the date and time of access;
the Internet Protocol address (IP address); and
the Internet service provider of the accessing device.

This data is generally processed for the following purposes:

delivering the website correctly;
ensuring the security and stability of our information-technology systems;
detecting and preventing attacks, misuse and technical faults; and
improving and optimising our website.

Where technically and legally possible, the data is processed in an aggregated or otherwise privacy-preserving manner. Server log data is stored separately from personal data voluntarily provided by a data subject.

The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in operating a secure, stable and functional website. Where processing is required to comply with a legal obligation, Art. 6(1)(c) GDPR applies.

Server log files are deleted or anonymised once they are no longer required for the purposes described above, unless longer storage is required for the establishment, exercise or defence of legal claims or by law.

4. Contacting us

Our website contains information that enables users to contact us electronically, including by email and, where available, through a contact form.

If a data subject contacts us by email or through a contact form, the personal data transmitted—such as their name, email address, telephone number and the content of their enquiry—will be stored automatically for the purpose of processing the enquiry and contacting the data subject.

The data is processed only to the extent necessary to handle the enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures. In all other cases, the legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries, or Art. 6(1)(a) GDPR where consent has been requested.

We delete the data when the enquiry has been conclusively dealt with, unless statutory retention obligations apply or the data is required for the establishment, exercise or defence of legal claims.

5. Cookies and similar technologies

Our website may use cookies and similar technologies. Cookies are small text files stored on a user’s device through the web browser. Similar technologies may include pixels, tags, local storage or software-development interfaces.

5.1 Necessary technologies

Technically necessary cookies and similar technologies may be used without consent where they are required to provide a service expressly requested by the user or to operate the website securely and correctly. These may include technologies used for:

maintaining a session;
storing security or consent settings;
enabling shopping-cart or booking functions;
preventing misuse; and
balancing server loads.

The legal basis for the storage or access required to provide the service is Section 25(1) sentence 1 TDDDG, insofar as applicable. The subsequent processing of personal data is based on Art. 6(1)(b) or Art. 6(1)(f) GDPR, depending on the purpose.

5.2 Optional technologies

Analytics, marketing, advertising and social-media technologies are used only after the user has given the required consent, unless a specific legal exception applies.

Consent is managed through our consent-management solution. Users can change or withdraw their consent at any time through the consent settings provided on the website. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The legal basis for optional cookies and similar technologies is Art. 6(1)(a) GDPR and, where applicable, Section 25(1) sentence 2 TDDDG.

Users can also configure their browser to block or delete cookies. If cookies are disabled, some functions of the website may not work fully.

6. Social-media services and embedded content

The following sections apply only if the relevant service is actually embedded in or activated on the website. Social-media plugins and external content should be loaded only after the required consent has been obtained, unless the specific implementation is technically necessary or another legal basis applies.

When an external plugin or embedded service is loaded, the provider may receive information such as the user’s IP address, the URL visited, the date and time of access and technical information about the browser and device. If the user is logged into an account with the relevant provider, the provider may be able to associate the visit with that account.

We have no control over the scope of the data collected by the respective provider or over the provider’s further processing of that data. The privacy policy of the respective provider applies.

6.1 Meta services: Facebook and Instagram

Our website may contain components or links provided by Meta Platforms, including Facebook and Instagram. The relevant provider within the European Economic Area may be Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, or another Meta entity specified by Meta for the relevant service.

If a Facebook or Instagram component is loaded, Meta may receive information about the specific page visited and technical access data. If the user is logged into Facebook or Instagram, Meta may associate the visit and interactions with the user’s account.

Interactions with integrated buttons, such as a Like, Share or Instagram button, may be transmitted to Meta and stored or processed by Meta. The exact data processing depends on the implementation and the user’s consent settings.

Further information is available in Meta’s privacy policy:

Users can prevent the association of a visit with their account by logging out of Facebook and Instagram before visiting our website. This does not necessarily prevent all technical data from being transmitted when an external component is loaded.

6.2 Pinterest

Our website may contain components or links provided by Pinterest. Pinterest is a service that allows users to share and discover images, videos and other content.

If a Pinterest component is loaded, Pinterest may receive information about the specific page visited and technical access data. If the user is logged into Pinterest, Pinterest may associate the visit and interactions with the user’s account.

Further information is available in Pinterest’s privacy policy:

Pinterest Privacy Policy

Users can prevent the association of a visit with their account by logging out of Pinterest before visiting our website. This does not necessarily prevent all technical data from being transmitted when an external component is loaded.

6.3 LinkedIn

Our website may contain components or links provided by LinkedIn. LinkedIn is a professional social-networking service operated by LinkedIn Corporation and its affiliated companies, including LinkedIn Ireland Unlimited Company for relevant European activities.

If a LinkedIn component is loaded, LinkedIn may receive information about the specific page visited and technical access data. If the user is logged into LinkedIn, LinkedIn may associate the visit and interactions with the user’s account.

Further information is available here:

Users can prevent the association of a visit with their account by logging out of LinkedIn before visiting our website. This does not necessarily prevent all technical data from being transmitted when an external component is loaded.

6.4 X, formerly Twitter

Our website may contain components or links provided by X, formerly known as Twitter. X is a publicly accessible social-media and microblogging service.

If an X component is loaded, X may receive information about the specific page visited and technical access data. If the user is logged into X, X may associate the visit and interactions with the user’s account.

Further information is available in X’s privacy policy:

X Privacy Policy

Users can prevent the association of a visit with their account by logging out of X before visiting our website. This does not necessarily prevent all technical data from being transmitted when an external component is loaded.

6.5 XING

Our website may contain components or links provided by XING, a professional social-networking service operated by New Work SE, Dammtorstraße 29, 20354 Hamburg, Germany, or the entity specified in the applicable XING legal information.

If an XING component is loaded, XING may receive information about the specific page visited and technical access data. If the user is logged into XING, XING may associate the visit and interactions with the user’s account.

Further information is available here:

XING Privacy Policy

Users can prevent the association of a visit with their account by logging out of XING before visiting our website. This does not necessarily prevent all technical data from being transmitted when an external component is loaded.

6.6 Tumblr

Our website may contain buttons or links provided by Tumblr. Tumblr is a blogging and social-media service operated by Automattic Inc. or an affiliated entity.

If a Tumblr button or component is loaded, the browser may establish a direct connection to Tumblr servers. Depending on the implementation, Tumblr may receive the user’s IP address, the URL of the page visited and technical access data.

Further information is available in Tumblr’s privacy policy:

Tumblr Privacy Policy

7. Web analytics

7.1 etracker

Our website may use etracker, a web-analytics service provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany.

Depending on the configuration, etracker may process information about the use of our website, such as page views, interactions, technical information and campaign data. etracker may use cookies or similar technologies, depending on the configuration selected by the website operator.

Where analytics cookies or similar technologies are used, they are activated only with the user’s consent. Where etracker is configured in a privacy-preserving mode that does not require consent under applicable law, processing is based on the relevant legal assessment and configuration.

The purpose of processing is to analyse and improve the use, performance and functionality of our website. Where possible, data is processed in pseudonymised or aggregated form. We do not use etracker data to identify visitors personally unless we have a separate legal basis and have informed the data subject accordingly.

Further information is available in etracker’s privacy policy:

etracker Privacy Policy

Users may withdraw consent through our consent settings. If an etracker opt-out mechanism is offered on the website, it may also be used to object to future analytics processing.

7.2 Google Analytics 4

If activated on our website, we use Google Analytics 4, a web-analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, may also be involved in processing.

Google Analytics 4 may use cookies and similar technologies to analyse how users interact with our website. Depending on the configuration and the user’s consent settings, the following data may be processed:

online identifiers and technical information;
IP address and approximate location information;
page views, events and interactions;
information about the device and browser; and
campaign and referral information.

Google Analytics is activated only after the required consent has been obtained. The configuration should be reviewed to ensure that data minimisation, consent signals, retention periods and any cross-service data sharing are correctly implemented.

Google may process data outside the European Economic Area. Where required, appropriate safeguards must be in place, such as an adequacy decision, standard contractual clauses or another lawful transfer mechanism.

Further information is available here:

Users may withdraw consent through our consent settings. Where available, users may also use Google’s browser add-on for opting out of Google Analytics:

Google Analytics Opt-out Browser Add-on

8. Google Ads

If activated on our website, we use Google Ads, formerly known as Google AdWords, an online advertising service provided by Google Ireland Limited and, where applicable, Google LLC.

Google Ads may use cookies and similar technologies for conversion measurement, campaign performance analysis, remarketing and interest-based advertising. If a user reaches our website through a Google advertisement, Google may place or read an advertising cookie or otherwise process information about the visit, depending on the implementation and consent settings.

The data processed may include:

online identifiers and advertising identifiers;
IP address and technical device information;
information about the advertisement that led to the visit;
page views, conversions and other interaction data; and
information required to measure campaign performance.

Google Ads and related tracking technologies are activated only after the required consent has been obtained. The exact processing depends on the configuration of Google Tag Manager, Google Consent Mode and the relevant Google Ads tags.

Google may process data outside the European Economic Area. Where required, appropriate safeguards must be in place for such transfers.

Further information is available here:

Users may withdraw consent through our consent settings and manage personalised advertising through Google’s advertising settings.

9. Google AdSense

If activated on our website, we use Google AdSense, an online advertising service provided by Google Ireland Limited and, where applicable, Google LLC.

Google AdSense may use cookies, pixels and similar technologies to display, measure and optimise advertising. Depending on the configuration and consent settings, Google may process information such as IP addresses, browser and device information, page views, advertising interactions and online identifiers.

Google AdSense is activated only after the required consent has been obtained, unless a specific legal exception applies. The exact processing depends on the advertising configuration, the consent-management platform and the settings selected by the website operator.

Google may process data outside the European Economic Area. Where required, appropriate safeguards must be in place for such transfers.

Further information is available here:

Users may manage personalised advertising through Google’s advertising settings.

10. Newsletter

If we offer a newsletter, the data entered by the user during registration is used exclusively to send the newsletter and to manage the subscription. Depending on the registration form, this may include:

title or salutation;
name; and
email address.

Additional data is not collected unless it is clearly identified as optional and is required for a stated purpose.

Newsletter registration is based on the user’s consent under Art. 6(1)(a) GDPR. Where the double opt-in procedure is used, we store information about the confirmation of the subscription in order to document consent.

The newsletter may contain links or technical elements that enable us to determine whether the newsletter was opened or which links were clicked, but only where this has been transparently disclosed and is legally permitted.

Users may withdraw their consent at any time using the unsubscribe link contained in every newsletter. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We delete newsletter data when the subscription is cancelled, unless statutory retention obligations or the establishment, exercise or defence of legal claims require continued storage.

To be checked before publication: The name and address of the actual newsletter provider, its processing location, any data-processing agreement and the provider’s privacy policy must be added if an external newsletter service is used.

11. Data processing for bookings, events and payments

If users register for an event, book a service or purchase an additional service through the website, we process the data required to establish and perform the contractual relationship. This may include contact details, booking information, vehicle information, payment information and data required for safety, insurance, age verification or event administration.

The legal basis is Art. 6(1)(b) GDPR where processing is necessary to perform a contract or take pre-contractual steps. Art. 6(1)(c) GDPR applies where processing is required by law. Art. 6(1)(f) GDPR may apply where processing is necessary for our legitimate interests, such as event security, fraud prevention, accounting or the defence of legal claims.

Payment data is transmitted to the payment service provider, bank or financial institution involved in processing the payment. The payment provider’s own privacy policy also applies.

We disclose personal data to service providers only where this is necessary for the relevant purpose, such as hosting, IT support, payment processing, shipping, event administration, timing services, customer support or legal and tax services. Where required, we conclude data-processing agreements with processors under Art. 28 GDPR.

12. Data processing for applications and recruitment

We collect and process applicants’ personal data for the purpose of handling applications and carrying out the recruitment process. Processing may also take place electronically, for example where an applicant submits application documents by email or through an online application portal.

The data may include contact details, CV information, qualifications, work history, references and other information voluntarily provided as part of the application.

The legal basis is Art. 6(1)(b) GDPR in conjunction with Section 26 BDSG, insofar as processing is necessary for the decision on establishing an employment relationship or for the performance of the employment relationship.

If we conclude an employment contract with an applicant, the application data is transferred to the personnel file and stored in accordance with the applicable statutory requirements.

If we do not conclude an employment contract, we generally delete the application documents no later than six months after notification of the rejection decision, unless a longer storage period is necessary for the establishment, exercise or defence of legal claims, in particular in connection with claims under the German General Equal Treatment Act (AGG), or the applicant has consented to inclusion in a talent pool.

If we maintain a talent pool, the applicant’s data is stored only on the basis of separate consent and for the period stated when consent is obtained. Consent may be withdrawn at any time with effect for the future.

13. Purposes, recipients and retention periods

We process personal data only for the purposes described in this Privacy Policy and only to the extent necessary to achieve those purposes or comply with legal obligations.

Personal data is not disclosed to third parties for unrelated purposes. We may disclose data to public authorities where required by mandatory national law or where disclosure is necessary for the establishment, exercise or defence of legal claims, the prevention of criminal offences or the protection of network and information security.

Depending on the purpose, recipients may include:

hosting and IT service providers;
payment service providers and banks;
shipping and logistics companies;
event and timing-service providers;
newsletter and communication providers;
analytics, advertising and social-media providers, where activated lawfully;
professional advisers, such as tax advisers and lawyers; and
public authorities where legally required.

We delete or anonymise personal data when it is no longer required for the purpose for which it was collected, unless:

a legal obligation requires continued storage;
the data is required to establish, exercise or defend legal claims; or
the data must be retained to document a legally relevant transaction or processing activity.

Statutory retention periods may vary depending on the type of record. Commercial and tax records may be subject to retention periods of several years, including periods of six, eight or ten years depending on the document and the applicable provision.

14. International data transfers

Some service providers may process personal data outside the European Economic Area, including in countries that may not provide a level of data protection equivalent to that in the European Union.

Where personal data is transferred to a third country, we ensure that the transfer is based on a valid legal mechanism, such as:

an adequacy decision of the European Commission;
standard contractual clauses approved by the European Commission;
binding corporate rules; or
the user’s explicit consent, where legally permitted and appropriate.

Further information about individual transfers is provided in the relevant sections of this Privacy Policy and in our consent-management interface.

15. Legal bases for processing

We process personal data on the following legal bases:

15.1 Consent — Art. 6(1)(a) GDPR

We rely on consent where we ask the data subject to agree to a specific processing purpose, such as optional cookies, analytics, advertising, social-media integrations or newsletter subscriptions.

Consent may be withdrawn at any time with effect for the future.

15.2 Contract and pre-contractual measures — Art. 6(1)(b) GDPR

We rely on Art. 6(1)(b) GDPR where processing is necessary to perform a contract with the data subject or to take steps at the data subject’s request before entering into a contract. This includes enquiries about our products, services, events and bookings.

15.3 Legal obligations — Art. 6(1)(c) GDPR

We rely on Art. 6(1)(c) GDPR where processing is necessary to comply with a legal obligation, such as tax, accounting, commercial, safety or documentation requirements.

15.4 Vital interests — Art. 6(1)(d) GDPR

In exceptional cases, processing may be necessary to protect the vital interests of the data subject or another natural person. This may apply, for example, in a medical emergency where information must be provided to a doctor, hospital or emergency service.

15.5 Legitimate interests — Art. 6(1)(f) GDPR

We may rely on Art. 6(1)(f) GDPR where processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not override that interest.

Legitimate interests may include the secure operation of our website and IT systems, the prevention of misuse, the handling of enquiries, the enforcement or defence of legal claims and the management of our business.

16. Rights of data subjects

Data subjects have the following rights under the applicable data-protection laws, subject to the relevant legal requirements and exceptions:

Right of access: to request confirmation as to whether personal data concerning them is being processed and, if so, access to that data and the information required by Art. 15 GDPR;
Right to rectification: to request the correction of inaccurate personal data and completion of incomplete personal data;
Right to erasure: to request deletion of personal data where the requirements of Art. 17 GDPR are met;
Right to restriction of processing: to request restriction of processing where the requirements of Art. 18 GDPR are met;
Right to data portability: to receive personal data provided by the data subject in a structured, commonly used and machine-readable format, or to request transmission to another controller where the requirements of Art. 20 GDPR are met;
Right to object: to object to processing based on Art. 6(1)(e) or Art. 6(1)(f) GDPR on grounds relating to the data subject’s particular situation. The data subject may object at any time to processing for direct marketing purposes, including related profiling; and
Right to withdraw consent: to withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise these rights, please contact us using the details in Section 2.

Data subjects also have the right to lodge a complaint with a competent data-protection supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement.

17. Links to third-party websites

Our website may contain links to external websites operated by third parties. We have no influence over the content or compliance of those websites with data-protection laws.

As the provider of our own content, we are responsible for that content under the applicable laws. A distinction must be made between our own content and content provided by third parties to which we link.

We assume no responsibility for external content made available through links. The operator of the linked website is solely responsible for illegal, incorrect or incomplete content and for damage arising from the use or non-use of information provided on that website.

18. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time in compliance with the applicable data-protection laws.

The version of this Privacy Policy available online at the time of the user’s visit shall apply. We recommend that users review this Privacy Policy regularly.

Last updated: 25 August 2026